Hello All,
On one of the Azure VM which we are using as QRadar Event collector, /var partition is 100% full.
After investigating more on this, we found that /var/opt/omi/run/ core.99883, core.99571, core.99909 files taking all the space.
- OS version : Red Hat Enterprise Linux Server release 7.5 (Maipo)
- Version of omiserver is OMI-1.6.2-0
Due to this our production environment is hampering.
We have deleted .core files manually from /var/opt/omi/run/ but it again continuously generating and filling /var.
Please do the needful ASAP.
__
Thanks and Regards,
Santosh Pande